Don't miss July's Paper Plant Club kit – orders close in
Don't miss July's Paper Plant Club kit – orders close in
Don't miss July's Paper Plant Club kit – orders close in
00DAYS
00HOURS
00MIN
00SEC
Nicole's Jungle logo with illustrated tropical leaves inside a rectangular frame

Privacy Policy

Last updated: 01/05/2026

1. Who is responsible for your data

I, Nicole Bannell, am the data controller for Nicole's Jungle.

This policy explains what personal data I collect, how I use it and your rights.

My website is aimed at adults in the UK and a small number of customers in other countries, including the USA, Canada and Australia.

2. Information I collect

I collect information in three main ways:

1. Information you give me directly

For example when you:

  • Place an order or create an account
  • Join the Paper Plant Club or buy a gift
  • Sign up to my email list
  • Contact me by email, WhatsApp or through a form on the site

This may include:

  • Name
  • Email address
  • Postal address
  • Country
  • Payment information (processed by payment providers)
  • Any messages you send me

2. Information collected automatically when you use the site

For example:

  • IP address
  • Browser type and device type
  • Pages viewed, time spent on pages and links clicked
  • General location based on IP

This comes mainly from cookies and similar technologies (see the Cookie Policy).

3. Information from partners and tools

For example:

  • Payment status and fraud checks from Stripe/Subbly
  • Email engagement (opens and clicks) from Flodesk
  • Analytics from Google Analytics 4 and Hotjar
  • Advertising performance from Meta (Facebook/Instagram)

I do not deliberately collect special category data (such as health information) or data about children.

3. How I use your information

I use your information:

To process and deliver your orders and subscriptions

For example, to take payment, send order confirmations, dispatch boxes, and manage renewals.

To manage your account

For example, to let you log in, see your subscriptions, change your address or payment details, and pause or cancel.

To communicate with you

For example, to send:

  • Service emails about your orders, shipping, billing and account
  • Replies to messages you send me

To send marketing emails, if you have agreed or it is allowed

For example, emails about new plants, offers, seasonal boxes and gentle reminders. You can unsubscribe at any time with the link in each email or by contacting me.

To run and improve the website and my business

For example, using analytics to understand which pages people use, which plants are popular, and how to improve the experience.

To show and measure adverts

For example, using Meta and Google tools to:

  • Show relevant ads for Nicole's Jungle
  • Measure how many people saw an ad and then visited or ordered

This uses cookies and similar technologies. See the Cookie Policy for more detail.

To comply with legal and tax requirements

For example, keeping records of sales for accounting and tax.

I do not use AI or fully automated decision-making to approve or refuse orders. I may use automated tools to help understand general behaviour (for example, email analytics or website analytics), but these do not make individual legal decisions about you.

4. Legal bases for using your data

Under UK GDPR, I rely on different legal bases depending on what I am doing:

  • Contract: to process orders, provide the Club and manage your account.
  • Legitimate interests: to run and improve my business, communicate about similar products to existing customers, prevent fraud and keep the site secure.
  • Consent: for optional marketing emails where required, and for some advertising cookies where you have opted in elsewhere.
  • Legal obligation: where I must keep records for tax and regulatory purposes.

5. Who I share data with

I share your data with a small number of trusted service providers who help me run Nicole's Jungle. They only use your data to provide their services to me, not for their own purposes. These currently include:

  • Subbly – website platform, checkout and subscription management
  • Stripe – payment processing
  • Flodesk – email marketing
  • Google Analytics 4 – website analytics
  • Hotjar – website behaviour analytics (for example, heatmaps and session recordings)
  • Meta (Facebook/Instagram) – advertising and tracking of ad performance
  • Royal Mail and other postal/courier services – delivering your boxes

Some of these providers are outside the UK or the EU. Where that is the case, I use providers that offer appropriate protections for international transfers (for example, Standard Contractual Clauses or adequacy decisions).

I may also share data if required by law or to protect my rights, for example:

  • With law enforcement or regulators if required by law
  • With professional advisers (such as accountants) where necessary
  • If I ever sell or restructure the business, with a buyer or potential buyer

I do not sell your personal data to third-party marketers.

6. How long I keep your data

I keep your personal data only for as long as needed for the purposes above:

  • Order and subscription records: usually up to 7 years for legal and tax reasons.
  • Email marketing lists: until you unsubscribe or I clean inactive contacts, plus a short period to keep a record of your opt-out.
  • Messages and support emails: for as long as needed to handle your request and keep a reasonable history of support.
  • Analytics data: for periods set in the relevant tools (for example, GA4), generally in aggregated form.

When I no longer need your personal data, I will delete or anonymise it.

7. Your rights

Under UK data protection law, you have rights over your personal data, including:

  • Right of access – to ask for a copy of your personal data.
  • Right to rectification – to ask me to correct inaccurate or incomplete data.
  • Right to erasure – in some cases, to ask me to delete your data.
  • Right to restrict processing – in some cases, to ask me to limit how I use your data.
  • Right to object – to certain uses, including direct marketing.
  • Right to data portability – in some cases, to receive your data in a structured, machine-readable format.

To exercise any of these rights, email nicole@nicolesjungle.com. I may need to verify your identity before acting on your request.

If you are unhappy with how I use your data, you can also complain to the UK Information Commissioner's Office (ICO). I would always prefer you contact me first so I can try to resolve the issue.

8. California privacy information

I am a small UK business and do not currently meet the thresholds where the California Consumer Privacy Act (CCPA) formally applies in full.

However, if you are a California resident and contact me about your personal information and your rights under California law (for example, access or deletion), I will consider and handle your request in line with the spirit of that law where reasonably possible.

I do not sell personal information as “sell” is generally understood under CCPA.

9. Cookies and similar technologies

My site uses cookies and similar technologies for:

  • Essential functions (for example, keeping you logged in and managing the cart and checkout)
  • Analytics and performance (Google Analytics 4, Hotjar)
  • Advertising and social media (Meta pixel for Facebook/Instagram ads)

The Cookie Policy explains what cookies are used and how you can control them through your browser and other tools.

10. Security

I use appropriate technical and organisational measures to protect your personal data from loss, misuse and unauthorised access. This includes:

  • Using reputable third-party providers for payments and hosting
  • Limiting access to personal data to what is needed
  • Using secure connections (HTTPS) on my site

No system is perfectly secure, but I take your privacy seriously and aim to keep risks low.

11. Changes to this policy

I may update this Privacy Policy from time to time. When I do, I will change the “last updated” date at the top of this page. Significant changes may also be highlighted on the website or by email.

12. Contact

If you have any questions about this policy or your data, please email: nicole@nicolesjungle.com.

This policy is effective as of 01/05/2026.